syzbot


KCSAN: data-race in tomoyo_supervisor / tomoyo_supervisor (4)

Status: auto-closed as invalid on 2020/12/23 02:19
Subsystems: tomoyo
[Documentation on labels]
Reported-by: syzbot+81fbc13e36568934ffa4@syzkaller.appspotmail.com
First crash: 1280d, last: 1254d
Similar bugs (3)
Kernel Title Repro Cause bisect Fix bisect Count Last Reported Patched Status
upstream KCSAN: data-race in tomoyo_supervisor / tomoyo_supervisor tomoyo 44 1654d 1664d 0/26 closed as invalid on 2019/10/15 15:50
upstream KCSAN: data-race in tomoyo_supervisor / tomoyo_supervisor (3) tomoyo 142 1533d 1585d 15/26 fixed on 2020/02/18 14:31
upstream KCSAN: data-race in tomoyo_supervisor / tomoyo_supervisor (2) tomoyo 88 1619d 1653d 0/26 closed as invalid on 2019/11/19 14:04

Sample crash report:
==================================================================
BUG: KCSAN: data-race in tomoyo_supervisor / tomoyo_supervisor

write to 0xffffffff883bac78 of 8 bytes by task 4892 on cpu 1:
 tomoyo_update_stat security/tomoyo/common.c:2340 [inline]
 tomoyo_supervisor+0x176/0xb20 security/tomoyo/common.c:2079
 tomoyo_audit_path_log security/tomoyo/file.c:168 [inline]
 tomoyo_path_permission security/tomoyo/file.c:587 [inline]
 tomoyo_path_perm+0x261/0x330 security/tomoyo/file.c:838
 tomoyo_inode_getattr+0x18/0x20 security/tomoyo/tomoyo.c:123
 security_inode_getattr+0x7f/0xd0 security/security.c:1279
 vfs_getattr fs/stat.c:121 [inline]
 vfs_statx+0xf8/0x270 fs/stat.c:189
 vfs_fstatat fs/stat.c:207 [inline]
 vfs_lstat include/linux/fs.h:3125 [inline]
 __do_sys_newlstat fs/stat.c:362 [inline]
 __se_sys_newlstat+0x46/0x250 fs/stat.c:356
 __x64_sys_newlstat+0x2d/0x40 fs/stat.c:356
 do_syscall_64+0x39/0x80 arch/x86/entry/common.c:46
 entry_SYSCALL_64_after_hwframe+0x44/0xa9

write to 0xffffffff883bac78 of 8 bytes by task 15487 on cpu 0:
 tomoyo_update_stat security/tomoyo/common.c:2340 [inline]
 tomoyo_supervisor+0x176/0xb20 security/tomoyo/common.c:2079
 tomoyo_audit_path_number_log security/tomoyo/file.c:235 [inline]
 tomoyo_path_number_perm+0x227/0x2d0 security/tomoyo/file.c:734
 tomoyo_path_mknod+0xe0/0x100 security/tomoyo/tomoyo.c:240
 security_path_mknod+0x98/0xf0 security/security.c:1078
 may_o_create fs/namei.c:2928 [inline]
 lookup_open fs/namei.c:3069 [inline]
 open_last_lookups fs/namei.c:3178 [inline]
 path_openat+0x835/0x20a0 fs/namei.c:3366
 do_filp_open+0xbd/0x1d0 fs/namei.c:3396
 do_sys_openat2+0xa3/0x240 fs/open.c:1168
 do_sys_open fs/open.c:1184 [inline]
 __do_sys_openat fs/open.c:1200 [inline]
 __se_sys_openat fs/open.c:1195 [inline]
 __x64_sys_openat+0xef/0x110 fs/open.c:1195
 do_syscall_64+0x39/0x80 arch/x86/entry/common.c:46
 entry_SYSCALL_64_after_hwframe+0x44/0xa9

Reported by Kernel Concurrency Sanitizer on:
CPU: 0 PID: 15487 Comm: syz-executor.0 Not tainted 5.10.0-rc4-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
==================================================================

Crashes (24):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2020/11/18 02:18 upstream 111e91a6df50 09323409 .config console log report info ci2-upstream-kcsan-gce
2020/11/16 17:00 upstream 09162bc32c88 1bf9a662 .config console log report info ci2-upstream-kcsan-gce
2020/11/15 22:04 upstream 0062442ecfef 1bf9a662 .config console log report info ci2-upstream-kcsan-gce
2020/11/15 01:50 upstream f01c30de86f1 1bf9a662 .config console log report info ci2-upstream-kcsan-gce
2020/11/13 12:49 upstream 585e5b17b92d 4a7fa9b4 .config console log report info ci2-upstream-kcsan-gce
2020/11/12 19:15 upstream 3d5e28bff7ad 77a55c8e .config console log report info ci2-upstream-kcsan-gce
2020/11/12 03:29 upstream 3d5e28bff7ad cca87986 .config console log report info ci2-upstream-kcsan-gce
2020/11/10 22:09 upstream eccc87672492 cca87986 .config console log report info ci2-upstream-kcsan-gce
2020/11/10 16:25 upstream 407ab579637c cca87986 .config console log report info ci2-upstream-kcsan-gce
2020/11/09 23:14 upstream 3552c3709c0e cba33199 .config console log report info ci2-upstream-kcsan-gce
2020/11/08 13:02 upstream 4429f14aeea9 cba33199 .config console log report info ci2-upstream-kcsan-gce
2020/11/07 22:58 upstream 659caaf65dc9 cba33199 .config console log report info ci2-upstream-kcsan-gce
2020/11/06 06:14 upstream 521b619acdc8 cba33199 .config console log report info ci2-upstream-kcsan-gce
2020/11/04 11:23 upstream 4ef8451b3326 cba33199 .config console log report info ci2-upstream-kcsan-gce
2020/11/03 12:24 upstream b7cbaf59f62f cba33199 .config console log report info ci2-upstream-kcsan-gce
2020/11/01 14:04 upstream c2dc4c073fb7 8bc4594f .config console log report info ci2-upstream-kcsan-gce
2020/10/29 07:50 upstream 23859ae44402 f24824d3 .config console log report info ci2-upstream-kcsan-gce
2020/10/28 02:04 upstream ed8780e3f2ec 96e03c1c .config console log report info ci2-upstream-kcsan-gce
2020/10/27 17:46 upstream 4525c8781ec0 94942294 .config console log report info ci2-upstream-kcsan-gce
2020/10/25 14:19 upstream d76913908102 a1839e81 .config console log report info ci2-upstream-kcsan-gce
2020/10/25 00:59 upstream f11901ed723d a1839e81 .config console log report info ci2-upstream-kcsan-gce
2020/10/24 03:52 upstream 0adc313c4f20 2bb6666c .config console log report info ci2-upstream-kcsan-gce
2020/10/23 06:52 upstream 96485e446260 4e740c00 .config console log report info ci2-upstream-kcsan-gce
2020/10/22 15:36 upstream f804b3159482 be6b1582 .config console log report info ci2-upstream-kcsan-gce
* Struck through repros no longer work on HEAD.